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im^m 1 1 

TBf^<[:T^'-:?^f'^;jKL, mmBi<Dmm'tm2(Dtm^^rfBm<km'^m^m^^x^m 

Lxm 1 co^T--- ^ ^-f^^ L. MIB^ 1 (75^m^^ 3 <7)SLi5:*3 J; t/ttif2^P?fTIWfll^ffi v> 

mmmi<om^r~^. mmm2<D^mv-^~^^ m^(Di'fmzm^^^mm 

mmmw x r^i^ $ ^xx v> ^ tfriBi&ii tt fa t e> , ttr ib v ;i' - itriB ;v - -f 

W:^twmm^m^m^^xi'^m^ivfzi^(Di)^^t--^^ itriB^ i itfiB^2og*, 

[i»*:S2] 

ffTt^^ >/-?-=grtufB^;v-7'tc^»1-^ t ^m^fimt-f ^^IJa-frOTct^&S J: ^ 

m^-m. 3 ] 

ttriB^ ^'/^^-iiEig#«. tuBB:W^M*«^ttmti--i>. mmm^m<Dm.^r~i^{zn\^x 

tulB^ ^^-^'-^W^^^fflv^-Cf^bTtNy b erg-Rueppel if 
^:^2 wB^o^;v-7°#^->>^7^Ao 
[W*:^ 4 ] 

HifiBi5'';v--:/«a^gi±. HufB<&r?g'iff^tctjpx.T. tfriE^ >/^--i=5Mffi;6-e>a*n$tL/; 

m^-^ 5 ] 

t)^fz^(D^^ %%.mz6^w.^ixfzm.(^o^(^ i<^'^^^(r>^WL:^ y^^-mwh^mh \^x% 

lif 6 ] ° 
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tfriB^^S^gfiMfB^ 1 O^^^rBt^'fbLrtfrfBBt-^'fbT''-:^' ^f^jj^-t-^ t §mjlB<2rr?i 
[W*:^ 7 ] 

y°m^ iz^tirx^^zm^itr- ^kmlx^ #otuiB^it^ ^^^-i^mmmm^m^^x 

pJf^mfM ^ L fzm^^^ h^t^ m^lt* t . tulB - ^"VJi^M X m7i< $ tt-c v> 
[if M 8 ] 

mm^m'^±<Dmm^itzjt^xnFi&im±<Dm&W'tm^>^. m^M2. 5. a. 7<7)v^ 
im^m 9 ] 

^'^^ii^vy^-'f\z^^%^fz^ y^^-x'h'h^ t ^mmi-^ ^tox^^ ^^)v~y°m^ 

^f-^J^L. tfc, f^J^^n;^ctfrfBi^*;v-7°#:ScDtufB^^#76^'tf)IBiJ'';^-7^^ 
l^fB ;v - ^1=S^S ^ v> T . 

ttflB^ 1 <^^*=lr^ 1 <7)gL^tfrfBi?';V-7°WS^®t-TPi^$tLTV>^lulB<2rPfTltfR 
miB» 1 OS* 2 <^gL^:fe J; CffllrlB<2rW'lt^=^ffl V^-C^m LT^ 1 O^mr"- =^ 
ttrlB^ 1 (0^%-^n2,(Dt\M.i^^'Cfm%Z^m%M~^n^^xm.^\^xW.2(DmMT~9^ 

mmr'-^:^^ cm^%izffm^fix\^>&:z t ^um'^mx^ ^ ^--ommm 1 (^mm. m 
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1 0 1 

mm 2 cos*. i3 i BuiB*«iii tcM-f- ;s 'it#=^^n 5, ^ t CO v^^na*i& r-^^i"^ 

miBBt-^-fbT"- ^ . mmm i o^m-r - ^ . mmm 2 (Dmmr- isx zfmm^mm- 

\mim 1 1 ] 

V T- A 1*1 -e it ® f ij ffl ^ ^ Pfl it?R ^ 4& <7) ^ # Bs pj f g ^ i" -5) ^' ;v - y'^mm 
is J:lFi>-;v-'7°:l-^co^ife#yei^'^';v-7°co^ >'^-?--e^^:^-S>e'^ISMi-^1tfiE^Si: 

Bt-^-fb-T- ij^ft^^^jj^ itfiB^ 1 1 (D%Mih.m^^y\y- -f^-mmm-^^xwi 

x^^Lxm 1 (D^m-r-^ ^i'^m-r^mmt. 
xmwLxm 2 (Dm^r- ^ ^i'^j^-r ^mmt. 

itriB^i co^^T-'-ij^. mmm2<D^mr~^. m^<7)i^mzm^^^mmmx^^m^m 
. mmm 1 cos*. j; zftund^m 2 <dw^-^^ h . mmv^^itr- ^ . ttiB^ 1 (D^mr- 

isxnmmm2(D^mr~'$^i!)m]:^i&^%izi^^^fix\^^:h ^t^mm'^^x^ ^ 
ottfiB^i<^s*> mmm2(D^m. ^xvmmm^mi,zm-t^mWi^^htL^^t<D:^j: 
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[0 0 0 1 ] 

omMmu ^ m». i^^t^t- ^ mm ^^^-t^^jv- v 7. 7^ i» p-r * » 
[0002] 

[ 0 0 0 3 ] 

— ^*;v-7°*iS->7.xA-ei4, ^^)v~y'mm^tmt^ti^J^^^y^4 T■^^^1^'^)u~ 
Ollr-^^ i^^JV-T":^^ VJ^XA tr^V^T, ^"';V--7°^<7)^ >/-?-(7)^^^^ 

[0 0 0 4] 

[0 0 0 5] 

[0 0 0 6] 

o 

[0 0 0 7] 
[0 0 0 8] 

##lt:5cKl izx^m-^tifzm 1 <Dm^^mi^is\,^x . ^ >^'?-WJi#<:o^i/>^<2rMli 
t^^J^I|}4^ E 1 G ama UiJ;^" A Public Key Crypto 
system and a Signature Scheme Based on D 
iscrete Logarithms" (IEEE Trans. on 
Information Theory, IT-31, 4, pp. 469-472) K 

o tfz. wm'fXWi2x^^-^Kfzm2(D'^m^mK^\^^x\t^ ^y^^-mmm<om\'^h 

<kmmtmmmii. RSA^^ {" A Method for Obtaining D 
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igital Signatures and Public— Key Cryptos 
ystems," Communications of t 

he ACM, Vol. 21, No. 2, pp. 1 2 0 - 1 2 6 ) O i d =feBf 
[0 0 0 91 

^^iS^M(7);|f^^:^i-y~n -7 iJ^lHT-^^o Hi 3 ^^M-t^ m^^Wi. %\(Dt\. 
SSc^^lf 12 0 1. » 2 (^SLte^:|| 1 2 0 2. ^3 (T^am^^ff 1 2 0 3. ^4 OSL» 
1 2 0 4. ^5 oa^^^lf 1 2 0 5. ^6 OSL^^^ff 1 2 0 6. W>1 OBf -^'fb 

T-'- ^J'-fm^^ 1 2 0 7. W>2 (O^^itT- ^ {"^l^^^ 1 2 0 8. » 1 O^m^- 

^gi 2 0 9. ^2<7)^^7--^f^jt^^i 210. ^nft^i&^^^^i 211. mmm 

%t%^mM 12 12. ^ >/^"-1t$||S'If.t|5 1213. ^ '7 -b- 1 2 1 4 j3 J; 

iSmU^^l 2 1 5;d-^«^^^-CV>^o 
[0 0 10] 

^ 1 rnxM^^^^i 2 0 1 fi. m\ oBt^^kT'-^j'f^^^s 1 2 0 7 -^m^-f ^tvm.-^ 

[0011] 

» 2 coSL^^^^ 1 2 0 2 fi. ^2 (DBf ■f-'fbT"- iJ'f^^^© 1 2 0 8 T"f^ ffl f SL^ ^ 
[0012] 

^ 3 c^^LSfeit^lf 1 2 0 3{±. miom^r-iS^i'^m^^l 2 0 9 -Citmir ^^IB,^^ 

o 

[0013] 

^4coatemf?l 2 0 4i±. »2 0^mT''-^'f«¥Sl 2 1 O-ejgffli-^SLm^^ 

o 

[0 0 14] 

^5<^gLm^^f?l 2 0 5ii. m2<D^^r-^i'^m^mi 2 1 0 -eft^i-^SLm^i^ 

o 

[0 0 15] 

^ 6 oam^^t? 1 2 0 6i±. ^nii*^f^^^^i 2 1 1 -e-f^fflf^SLm^^^-r^o 

[0 0 16] 

^1 (T^Bt-^-fbT^-iTf^Sg^^l 2 0 7(4. ^lOSLm^^fll 2 0 1 T'^^ $ tLfcgliS: 
i:. ^ ^/^^-'ItiliS'ltfl? 12 12 i'lS'It^fLTV^^^ >-/-^'-WEHJ»0^ 1 (D^mt^Xt] 

) ^^nft^i&f^j^^^i 2 1 i^xzfm^mti^^i 2 1 5 tcttj;tji-;&o 

[0 0 17] 

m 2 (Dm^^tr-^i'fj^^m 1 2 o s «. m2 oasi^^^ 1202 x^j^^ixfz^m 
m^if)^^m9 1 i*3j;i7*istbt>^si 2 1 5tcm:tJi-^o 

[0018] 

m 1 <7)^^7"- ^j^J^^^ 1 2 0 9 (4. ^3 (T^am^^tl 1 2 0 3 -e^^^i tt/^^Lm^: 
. ^ >'/-^--'Itilffi'Ittl5 12 12 iz%im-^fiX\^^^^ >/t-iEH^#(7)^ 1 (DM^^Xtl t L 

T. ^ >^N*-iEig#o»io^^<7)^mf-'-^ (J^T. m KD^mr- ^ tmir) ^^nHfe 
^^<«^^1 2 1 l*5j;U»^*iS{±i:fj^^i 2 1 5 tc:mtJl--g.o 
[0 0 19] . 
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m 2 <D^mr~ ^^^m^m 1 2 1 0 {±. m4 (oM&mm 1 2 o 4 *3 i ^ 5 <D^m^ 

[0 0 2 0] 

^nft^ifei^^^^ 1 2 1 1 {i, ^y^- i>~Xtl^$^ 1 2 1 4^-hXlJ^fLfz^ -y^-i^^ 

. ^ 6 (7)SLm^^§^ 1 2 0 6 -e^^$tLfcM> ^1 coBf^jbT"-^, m2<Dm^itr- 

m 1 <7)mW:-r- ^ . m2<Dmnr-:$'. :^y^^-wEmw<Dmi^^zfm2(Dmm. 

[0 0 2 1 ] 

^le'it-r^c ^ >^^-mm*i±mi(Dmmtm2(Dm^t^^h^j:^o 

[0 0 2 2] 
[0 0 2 3] 

^ y^~v^xtj^^i 2 i4{±. m^^mn-t^^^y^-P'^x:fj-t^o 

[0 0 2 4] 

M^mti^^i 2 1 5{i> ^>7-tr-v\ ^ 1 (OBf-^^fhT^'-iJ^. ^2 (Dm^<tr~^ . m 

x - ^ - ^: L -C tl:l:^j -r o 
[ 0 0 2 5 ] 

[0 0 2 6] 

#^#^^^2 (cfsm$tLfc^2 0^5^^tTOi5'';v-7'#^v;^xA{i, iJ^;v-^ 
l^JMS^^ J; ifm^^U^^ L r ^ o 
[0 0 2 7] 

[0 0 2 8] 
[0 0 2 9] 

[0 0 3 0] 

[0 0 3 1 ] 

o 

[0 0 3 2] 
[0 0 3 3] 
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[0 0 3 4] • 
[0 0 3 5] 
[0 0 3 6 ] 

iWWWr^Wi 1]G. Ateniese and R. de Medeiros, " 
Efficient Group Signatures without Tra 

pdoors,"In Advances in Cryptology ASI 

ACRYPT 2 0 0 3, LNCS 2 8 9 4, pp. 2 4 6 - 2 6 8, Sprin 
ger-Verlag, 2003. 

[WWW'XWi 2] G. Ateniese, J. Camenisch, M. Joye 
and G.Tsudik, "A Practical and Provable 
Secure Coalition — Resistant Group Sign 
ature Scheme, "In Advances in Cryptolog 
y--C R Y P TO 2 0 0 0 , LNCS 1 8 8 0, pp. 2 5 5 - 2 7 0, Spr 
inger— Verlag, 2000. 

imMiim-ik L J: d 1 1- mm] 

[0 0 3 7] 
[0 0 3 8 ] 

m 1 cotsfe^iMj-^^ii. m 1 <Dm.^r- Y^m^^ 1209 t?>f^^$tL-&^ 1 <D^^r- 
^{±. m3(r>^Wi^m^ \ 2 0 3-c^^$tL^§Lm {&rf. 1^3 (7)gL«5:t^^-^-r) t^v^N* 

r<D^ y^^-mmwK^^^xmm^'vm 1 (D^mr-^i'fj^z^^i 209 tmx^^m^^f 

[0 0 3 9] 

"C cb •?) o 

[0 0 4 0] 

^2 (7)t^5^^#ft:-{i, ^ >^-?-l=S^4<^Mv^^®^^M}±R S AHf^^tc^-cfv^tr^lS^ 
^tLTv^^T^^ — J^t'RSABf^^oM:ft#{i^^t?. nmM:-^^iK^^^^t7!)mhfix 

o 

[0 0 4 1 ] 
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[0 0 4 2] 

;i/ - -f^'^ ;^ 7" A o T , 

^ 1 <Dt\M. t tutB iJ'';^ - y'mmmm x $ ^ ttr la^PFtwf^ t ^ ^ v> x at ^-rt l 

^ 1 O^mr'-iJ^. *5 J:r>'mfB^2 0|gm7="-^75^|WICffi*7ni''f^^$tLT\/^;&^ fc=^iE 
m^mx^ !9 ^-otulB^ l <^M*. tulB^ 2 (7)M*. J5 j; tFif)fBWiSMmi1-;i>tf m=^^P 

M*t|tllB^^»^ffiV>Tf^^$tL/c^)(7);ei^5>0^^. tufB^l<^M*> ttrlB^ 2 <7>^^, 

[0 0 4 3] 

±(Dmmw(Djcx:h^ ^ y ^^-^m^mm-^m^^ y^'^-^mmmmib^hi^^. mib^ y 
m^^Mxn^'m-t^h^K. m:^y^-^~mmi^^^m^m^^x ^y^-^-umm-^wwuL. m 

[0 0 4 4] 

tc^LTtulB^ ^^■^~-^iiM'li^fflv^i:#^L7t:N y berg-Rueppel ^ig-C 
t LX ^ J: v^o 
[0 0 4 5] 

tf^. tsrfBi5'*>'v-7°i=s^«{±. tfrlB<&'P?g'!f^t'ijn^-c. mm>^y^^~mmmw:i!>^hM 

[0 0 4 6] 

Wc^ y^^~^mmmmt lt»j 19 sr. tfriB^tJ:^ >^-^^-^ii®M^g#-rfB'Itt-'i> t 

mmju'kmmtmt^:hm^^y^^~-^m<2:mmtir^. ^/^--y-yi^s 

HufB:?';v-7°l=ll^g(i. WfBp« >'^^^-^fi^<ZriBii=^ljt#i-^ LT^> J:v>o 

toliE# 2004-3077569 



#11 2004-016006 



: 6/ 



[0 0 4 7] 

$t^.TV^-5,v^-r:}^;^^cDt^rfe^ >/-?-iE0J#<7)^ 1 ifc-rttra^^ >^'?-iiE?g» 

[0 0 4 8] 

m&mfM * L hi^t^ m-^'^W: t . ttf la ;v - -/^Ji^g -c pg^ $ tt-r 

[0 0 4 9] 

[0 0 5 0] 

y^^~%mm^%m-f^-fz}i^\z\%m^^mmm\±. mmnmm\zm<s <^m^^i}-hm\t 

[0 0 5 1 ] 

#«-it*i-^fci6tcttMi-^®^^Mi±. mmimMm\zm':5 <^^^^i)-^hmtt\.^fz^^ 
>^^--^y^mmmm<D^^(Dnn^i&mir^^t7!j^x^:ho t/z. :^y^^~^M^mw:<7)m 

$e^rMv^<2>M^{l^ mmim^mKm<:>^<^^^7b^ibMiifi^fzi6. :^y^^~^y'mm 

ffiiE# 2004-3077569 
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[0 0 5 2] 

[0 0 5 3 ] 

2 . :fe J: Z/;^|iE^a 3 =^ * L T -g, o 
[0 0 5 4] 

<Di^<Dm}&m^7Fi-yxj y^mx^:ho m 2 ^mm-r^ mi <D%mfm(ov)v~'f^ 

[0 0 5 5] 

~-^m^^y:^yj^\±. m2(Dmm^Mkx. ^)i"--^mmmm.i<D^y/^~-TBMmm^'5^ 

[0 0 5 6] 
[0 0 5 7] 

_ ID 3 ^#Bsi-^ t . :7°^s^s i ti. ^r^ilt^rj^^S 10 1.^ >^^'-'ItffiM 

/refill 0 2. fe^ J: O^'ttrMjS^^ 1 0 3=^;tLT:fct3, ~>;=^ x A^#-Cfflv^^<2rlH'If 

[0 0 5 8] 

^^^s 2 {±. mi <7)^m^m^ 201. ^2 (Dn^m^m^ 202. ^3 

2 0 3 , II 4 mim^^^ 2 0 4 . Bf -^^br"- iJ'fp^^g 2 0 5. mi (D^m^^-^im 
^^2 0 6 . m2(D^mT~^i^!^^m2 0 7, ^nlt^^f'^^^S 2 0 8,^ -^-fe-vA 

tj^^2 0 9. *^ffi^j^^2 1 0. mm-mm?,'mM2 1 1. ^:^^^'-'i«fiife'itfP2 1 2 

^ 2 13. i5 i ^ 5 oam^M 2 1 4 =^;i- LT:fe i9 . ^ 

[0 0 5 9] 

^tlE^g 3 {±ftliE#^ 3 0 1 ^^tL-CisiQ. #x.^fL7t^';v-y:W^(^iE^tt^«-r 
[0 0 6 0] 

^ >/^--M^M4 «^mil^^#^4 0 1,^ >^^--^iit:>^'IffmiS'lt«54 0 
2 . ^ 4 0 3. mi mm^mm^ 4 0 4. » 2 (D^im^m^ 4 0 5 L 

[0 0 6 1 ] 

^ >'/^--mjEi!)^^a 5 f±. 501.^ >^^^-mw^tf misw 5 0 

2. ^ ^/t-iigj^^^s 0 3. ^^J;CFSLi§:^^tl5 0 4 ^;tLT^^O> ^x. ^.:^^7t^:^';^- 
•7°»^ e ^|^co#^# ^ ^ ^ > it Wt^ ^ * L T ^ „ 
[0 0 6 2] 

^^jx^-y'mmmwi^zis^^x^mmmmT^^mi 0 1 ttrMa^si 0 3. itt^^m 
»^m^S4 0 1. mmimm^i^^^b 0 i^-^mij$:}x7t#®(7)<2jwiffi*iemL. 
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[0 0 6 3 ] 

[0 0 6 4 1 

1 0 1 t::tii^Ji-^o 
[0 0 6 51 

[0 0 6 6] 

tT> 0 4 mi<D'sim.^m^2 0 v^-^ihr~^^'fm^m2 0 stms^m 

[0 0 6 7] 

IW|;ittC. m2(Dmk^!^^2 0 2 ii, » 1 (^^^7^^- i^^^f-^^^^ 2 0 6 -efftffii-^»2 

<^!?Lm*ife^-r^o ^3<^sLm^^^2 0 3i±. m 2 <D^mr~ i}^4'^m^m2 o 7tm*m 

-r^^3(Z)M^^^1-^o m4(D^m^^^2 0 4{i. »^^f^^^^2 0 
■t ^ * 4 coSLS^: ^ ^^i- o 
[0 0 6 8] 

Bf-^'fbT'- ^f^^^^ 2 0 5 {i. ^1 2 0 1 -e^^ Lfzm 1 <7)gLmi: . ^ 

^ >^-?-|iEBJ#<7)^l c75^^^Bf-^fbL, #^tL/cBt^'fkT'-iJ'^^^^i&fF^#^2 0 
8^XZ/m^iiitl^m2 1 Oi^m^Ji-'So 
[0 0 6 9] 

^1 C0^m7"-ir'ft^^^2 0 6 {i. »2 0gL^^^^2 0 2 "e.^^ L/^^ 2 OgLm t 

, ^ >^^~mm.-mwM2 1 2 Km'm^fix\^^^^ y^^-mm^(Dm 1 om^t^xtit l 
m^i'fm^^z 0 8*3 j;c/^^m^j^^2 1 0 Kiatii-^o 

[0 0 7 0] 

^2 <^^mT-^-^'f«#m2 0 7{i. ^ 3 coSLm^j^fl 2 0 3 -Tr^fe^ L/c^ 3 OgLi^i: 
, ^ >/t-tff|ifB'|if[5 2 1 2 ^cfS1t$^^^•rv^^p^ >'^'^"-|iE9§#0^ 1 cD^^t ^A^J t L 

m^^)^^m2 0 8^x-cfm^mt}^m.2 1 ot-m^t/i-^o 

[0 0 7 1 ] 

^mm^if&^m 2 0 8 a . ^ V 2 0 9 ^ A:?: $ tL7t ^ -fe - >>\ ^ 

MMr-^. M'lt$^fBM2 1 1 t::|fi'!t$tt-CV^S^;Sfl, ^ >/^'-'|f $R|S'ltf|5 2 1 2 
tciB'Ii^tLTV^;!,^ >^N*-iiEgg#(7)^li3j:y»^^2 0ll^. <Zr^1f ^M^i^^S 1 0 1 tcT 

[0 0 7 2] 

^ :y^r--:/A:tJ#^2 0 9tt. *iS^#t/[I-r-<§^ •;'-fe-i^^^nm^^f^^^S2 0 8 
[0 0 7 3 ] 

[0 0 7 4] 
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[0 0 7 5] 
[0 0 7 6] 

m5mm^^^2 1 4{i. ^m^^2 1 3Kxti-r&m5<D^m^^mir^o 

[0 0 7 7] 
[0 0 7 8] 

^1 0 nzTmm^fifz<^kmmnt^xtitLx^ v)i^~fm^7i^m^mw2<Dm^mti 

^^2 1 0 ^-hiEL < mt] ^fitii> <D-A^^:i^mEir Z o ^LX^ ^MiE^^S 0 1 
[0 0 7 9] 

[0 0 8 0] 

-S) o 

[0 0 8 1] 

^ H 7 ^mmir:h h . ^it5*fm^^^^S4 0 1 {±. mi (7)gLi5c^«4 0 4 ii-hnM-^ 

mmm^k;^ y^^-mm-m-mt lt^ >^^~-^^c«^^itfB5'tt^4 o 2 triBiit. 

<2rPSMS-> ^^-^-M^lfm^: L-C^';v-7°1=S^S1 <^&P?HffRii^^^l 0 1 tcm;tJ 
[0 0 8 2] 

^ ^ >'^^--MI2«MTOItg|5 4 0 2 ti. imMWcM^^^WiA 0 1 -e^^LTtfiS^tt^ 
[0 0 8 3] 

^ 1 OSLm^J^H 4 0 4 {4. ^i5:^^^^^^4 0 1 l3gL^=^m*i-<2.o 
[0 0 8 4] 

1215 ^#Hs-t- ^ ^>/-?-^^^^4 0 3j±. m^mm2 (Dm%.^^2 1 a iiaitt 

^ tLTtM^ t =lrX:^J LT . m^^M 2 KMLxm 1 <^^* tm2 <^^*^^ ^ ^ ^ 

^^^-wiEH^»^^tTL. t /i*iS^fi2 t(Dmmxnfzm^mm2<D;^ y^^~mm^^ 

[0 0 8 5] 

m2'Dn.m^m^4 o sa. ^ >/n^-s»#^4 o a K^WL^mtiir^o 

[0 0 8 6] 

III 8 J; III 9 ii. ^ 1 (Dmtmm(D^ y^'(~^mmm'i:m^ir^^y'u y ^ mcom^ 

[0 0 8 7] 

ms^mM^^ t^ mwmmm&^m^^5 o i ti. sl^^i^s o 4;^-e>gL^=^^it> 

ffliE# 2004-3077569 



mK 2004-016006 



'^-v: 10/ 



[0 0 8 8] 

^ y ^^-Tmmm^mmmMs 0 2 ti. mmiwm.^m^m.b 0 1 xY^j^x^tzm^m^ 

[0 0 8 9 1 

SLte^^5 0 4 ii. ^ffcMM^J^¥^5 0 1 Ktim^d^lO-r^o 
[0 0 9 0] 

1119 ^#fis-r;& ^ >/^'-iili^^S5 0 3 fi> miiE^^s 0 1 -e^a^tt/ci^;^-^ 

[0 0 9 1] 

mr^ ^ 1 <7)mmMmo^')i^~--fm^^y^r-j^<Dmmw}m'<^^^xmmir:ho 

[0 0 9 2 ] 

^-fSIOi^ttrMat LT. Htr^2La^mi 0 3 75^^:$:v;^T•A-e^a^c^v^^<2rli^^°7^- 
[ 0 0 9 3 ] 

> p, q, Pii^ 
[0 0 9 4] 

[^1] 

g|p-l p\P-l 

[ 0 0 9 5 ] 
[0 0 9 6] 

p, q, P<D}iy ^fl^fl 
[0 0 9 7] 

|g| > 16Q, IpI > 1Q24, |P] > 1Q24 

[0 0 9 8] 
[ 0 0 9 9] 

CiT'. p^iimtir^mm^Zp*(D^ 'fS|&qOfl5^S^G<,=^#X.^o S/c. P ^{4^ 
[0 10 0] 

(Dt^. g h i a^= I t^£^^mX^j:\^^ a 1 , a2, a 3 ^^h^j:^^ X d g 

, h, i^m&o 

[0101] 

Gp 75^^11 4 C7)^^7CG. is J;a^^|| 5 O^feJ^TCH^IrS^^o i<7)t^. GjS^H^ 
2= 1 t:&^g0^T->&i/^y3 1 , ^ 2 ^^n'b^V^ j; ^ tc, G, H^il^o 
[0 10 2] 
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[0 10 3] 
m3] 

n 

[0 10 4] 
[0 10 5] 

-^LT. ^m^. mi<7)m$ki>. ^2o»^q. mscDm^p. mi<D^m7tg. %2 

(ry^mt\i. ^3<7)M7Gf. ^^(D^mtQ. ^5<^^^7gH. ^X-Xim^^m^^-J^y 

[0 10 6] 
[^4] 

U 



[0 10 7] 

^<2rP#ltM^¥^ 1 0 1 t^ffit/i-^o 
[0 10 8] 

^tc. ^ >^^--«a^S4 M^tM«^S4 0 1 tcJ: p« >^^--^ii^^4 
[0109] 

^tL^><7){-1;^tci3V^T, ^ 1 OSLl:^Jtf? 4 0 4 {itfr^!!ta¥-^ 1 0 3 "eSA-ff ^ 2 <7)* 

m q ^\tm. t-t^ mSii^ z<,ii^h^ y ^-^-^^mmrnm v ^^y^A \:Lmxf. wm^WM^ 
^^^4 0 1 Kxti-r^o mnMmm^m^^4 o i ti. m2<7)^)^%h y^^ 

[Olio] 
[^5] 

y = modp 



[0 111] 
[0 112] 

mkK. ^ y^^-^^^^<kmmY^<kfM'mmM7v^^^i o i Kmti'L. ^ y^^-^mm^ 

[0113] 

iwi;lttc. ^ ^^^^^-iii^^^s ra^tm^^j^¥S5 0 1 ^ y^^~mM^^ 

[0 114] 

dtL^cofls^tCisv^T. M^^fl5 0 4{itfrM3ffi^Sl 0 3 ■C#^Lfc»2 0*icq 

^5 0 1 ^cAtJi-^o ^t^. mtkmm^^^m.^ o i{±. ^i(7)^^7ngi:^>'/-^-ii 

[0 115] 
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e = g^ modp 



[0 116] 
[0117] 
[0 118] 

(Dm5(Dn.m^^^2 1 4ibmA.fzuwc^m^mtL. ^(Dm^mo^mr-^izMi^r 
, ^ y^^~mmmw4mfnLfz^ y^^-mmmmM^tm^^x, n y b e r g ^ 

Rueppe I tiZ i. ^^^y^^ ( "M essage Recovery for Sig 
nature Schemes Based on the Discrete Log 
arithm Problem," Advances in Cryptology 
- EUROCRYPT '94, pp. 1 8 2 - 1 9 3 ) tlt^o Tf^^ Lfc^iSf"- 
^^'^^o ^(7)^^-r-^{±N yberg-Rueppl m^t^^iv^ho ^(D^ 

mmwam i <D^mi3xx/m2<D^m-^M)&-^i^^o 

[0 119] 

mr, ^ y^'^~mm*(Dmf't^7v ^ y^^-^m.^WLA o z^iixf^m.^^2 iz(Dm 

[0 12 0] 

01 Oti> mi<D^mMM\zi,^^^)V-y-'m^y:^7-^(D^y^'^-m%.ncomV^'km-t 
[0121] 

mi 0 ^ t . m^^w: 2 (DRm^^ 2 1 3 t -r;^ •7°a 1 0 1 ^ 5 

OgL^^^^2 1 4t:^^$tL7t. ^2 W*^q ^'fi^t-r'5.^l?g#:Zq<7)V^-f tL>0^<7)7c 
[0 12 2] 

^tc, X-r T'A 1 0 2 -e. m^m0<D^m7'~-^ t LX 
[0123] 

lu = ff'' modp 



[0 12 4] 
[0125] 

tfc. 7" -7 -7° A 1 0 3 -C\ m^Maii^mi<D^j$[.7tg\tZm't^^^^(D^^'r-'^ I 

M(om.nmm.x^:h^}i<D^mm^r~^ s p ku^it#i-^o ^mm^r-^ s p ku{± 

> SchnorrO" Efficient Siganture Generation 
by Smart Cards" (Journal of Cryptology, 4 
, 3, pp. 161-17 4) \Z^^fltz:}^m^m\^^X^ ^^(D^^Ki'^J^-t^^t-fy^X^ 

[0126] 

y^UiifZ:ii)^ht\Mi}^^m.xf. (c, s) d ('tf-^t-^o 

[0 12 7] 
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= := W(ff||/r7||i?^) 
s ;= A — COT mod g 

[0 12 8] 

[0 12 9] 

spktr = (c,j) 



[0 13 01 
[0131] 

tfz^ Tsy-v 1 0 4 -t:\ ^^^(^^^7^-^ I u *nlt^^ r^^- ^ s p ku^^^^ 

[0 13 2] 
[0133] 

imi 01 

5icr = 5IS5£r(itr||5pfcEr) 
[0 13 4] 

A ^ -r ;z> c 1 -5, o 

[0 13 5] 
[0136] 

^ >/t-l=a^S4 {i. *nft¥^T^"-^ s p ku i::$:AltfIx-^ Svi}^^EL\^^^-'^i)^^ 
mir^ ■7°A 1 0 5) o ^nll#i&7"-:5' s p ku<^iEL${±^i:(D#^^^'^!9 5:oS 

[0 13 7] 

mi 11 

[0138] 

•rvi5';l'*i&SuC0iEL$(i. S i gu t::^*E>-r'i> ;i/§^WP^^V e ru 

[0 13 9] 
[^121 

Verir|[jSi7, Jir|| jpfctr) = 1 
[0 14 0] 
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[0141] 

flit. ^m-^^<^m^ti=ho 

[0 14 2] 

7sy-v -fK 1 0 6 ) o 
[0 14 3] 

^jc. y^-r -7 1 0 y-e. ^ >/N^-Sii^S4 0 3 {i. g:lt^-:>/c§L^^ t ^ 

mmmmmmmmnA o 2 tcie'it^^/s^ t^rjttiRrj^^a 1 0 1 

S o 

[0 14 4] 
[^1 3] 

T := Jcrft'' mo dp 
^ ;= /J — rumodg 

[0 14 5] 
[0 14 6] 

;^7^-7 ^"A 1 0 8 tcisv^T. #iS^g2 (iSttlXof^^ ^^t-iiig^ (y, e) ^eiSjEL 

i: i 19 d o 
[0 14 7] 
[iScl 4] 



[0 14 8] 

i'^a^n-r^ (;^x-;^7°Al 09)0 ^L-C#^^S2ii. ^^McT ^|K^^'lt$^|5'ltf|5 2 
1 Itr-f^^L. p<>/^^-tEH^# (7, ^) >/-?-'Itmffi'Itf|5 2 1 ZizU^ir^ (^T- 
7° A 1 1 0 ) o 
[0 14 9] 

spku. m^^W2 K^mi^fz^ y^-^-mm^ (7, f) , i3xrf^Ammr~i^ sv^ 
j^y^^-mmmm^^i 0 2izmti-t^ {>^Ty:^Ai 1 1) c :r.<D^mmmitm^mm. 

[0 15 0] 

^ y^^~mmmisxifm^m(Di'^m^m^fzm^mm2ii. ^ y'^-vxti^^2 0 9 

[0151] 
[0152] 

mi I'tmMir^t^ ;^7^:y7'A2 0 1-t?. ^ 1 OgL^^^lf 2 0 1 7&^^l?I#:Zq>6-?> 
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[0 15 3] 

^tc. XX -7 2 0 2 ^\ m^itr-^i'fm^^ 2 0 5 i±. mi <^tm. rt:^ y7t~ 



[0 15 5] 
[0 15 6] 

^tz. ;^ X -7 7°A 2 0 3 -e. mi (D^mv-^- ^i^m^^ 2 0 6 i±. ^2 (D^^w t J<> 
/■?-tE0^*oO^ 1 <^)M* r ^A:tJ ^ LT. 
[0 15 7] 

imi 6] 

ft' ;= 3/*"/" modp 

[0 15 8] 

[0159] 

mmi<^. ;^T--7:7°A 2 0 4 -C\ *2 (^^mT-'-i5'f^^^m2 0 7 {i. ^3<^SLmat^ 

>^'^-mm^<Dm i r * aij t lt. 

[0 16 0] 
[^17] 

J :=G'JEr modP 

[0161] 

[0 16 2] 
[0163] 
[0 16 4] 

^[Z. X A 2 0 5 T'. ^li*iS'f'^^#m 2 0 8 7&^*na*iS-r- iJ' ^f^^f ^ o 
[0 16 5] 

*nm*^7"-^{±. ^ -y-fe-vm^Atl^: LT, ^ 1 co^^t"- h ' i3j;Cf^2 0^ 

]^j<y/'^~-mmw(Dmi<Dwmr ^wi^i^-^^^^^t. yO/^-mmw (r, e) 

/N*-^a^S4 i:®'fBLTiEL< ^iCf^ :^^^^-iE0^* (r , ^z^JB 

■t^m^ma ^^n<^r\^>^:it. sf^-fbT-^-^ (g' , e' ) tS^^^ >/^--fiE0J§»colli <^ 

r, f) . ^i&ltcr. ^loa^r. »20SLl:a>. J: CF^ 3 (^SLm a IC^-T ^'lt*R^ 



e' := 




[0 16 6] 
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[0 16 7] 
[^1 8] 

e' = r~''"e''' mod j7 
J = i/'/«^ modp 

e'ft' = f^g-^hr^e^ modp 
^ rG[Q,p-l] 

[0 16 8] 

^mtz-t (r, f, ff, r, <o, a) =lr^oTV^-2) i t (r, f, a, r, co , a) 
[0169] 

-^rmji^^. 1? j ?khL-c. 0 5j)-?>p- i<^r^;o-ibM55 2j-i^ii«s5o s/c 

[0 17 0] 
[®:19] 

4*2!? := ^i-i — P 

[0171] 

[0 17 2] 

[0 17 3] 
[^2 0] 

[0 17 4] 

[0 17 5] 
m2 1] 

r 4- ^j-l ^ [Q,P - 1] r + G [Q,p - 1] 

[0176] 

■e*tL(i\ 2j-i i: y52j 
[0 17 7] 
[^2 2] 



[0 17 8] 

[0 17 9] 

[0 18 0] 
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[^2 3] 
1 < J < & 

[0181] 

o r ^o-lii ^ tt^-t ^ o 

[0182] 

m2 4] 

[0 18 3] 

^t::. :tPl#Z<i07Gti, t2, t3, t4, t5^7>^'A(cS(:j*\ -e;l^?5^fflv>T. 
[0 18 4] 
[^2 5] 

= f*'g-*'h~**e*^ modp 
= modp 



^3 



[0 18 5] 

[0 18 6] 

[0 18 7] 
[^2 6] 

1 < J < 

[0188] 

[0 18 9] 
[^2 7] 

:= eT* modjJ 

[0 19 0] 

[0191] 
[^2 8] 

5^ := gf' modp 

Jj := G'^H^ modP 

[0192] 
[0193] 
[0 19 4] 



miiE# 2004-3077569 



mM. 2004-016006 



^-v : 18/ 



m2 91 

c := ^(^PII/IMIFIMIellHIl • • • IIFftlirillWall^ill • • - M\Ji\\ • - ^ |m) 



10 19 5] 

. isXT}\ c [ j 3 =0(Dt^ 

[0 19 61 

Bi3 01 

V6J — 3 '•= V'aj — X 
V6jr- — 2 := V'Sj 
i'6jf — 1 := rjsj — x 
f^ej ■•= 172 J 
-Wj := -yj mod g 
:= uj mod. 

[0 19 71 
. c [ j ] = 1 
[0 19 81 
[^3 1] 

V6j-4 '= y^^^f^^^f 
vej-3 := w 4- ip2j-i 

Vej-2 •= ■00 Zq 

vej-1 := a + mj-i 
•Wj := 7j — T mod g 



Zj : — «j 



-1 



mod p 



aejru 
[0 19 91 

^ft*-r^o ^li-C'. c [j] c O j #l<Dlf hO'lit'lrRi-o 
[0 2 0 0] 

ciSil/ (vi, V2, V3, V4, V5, V6, * * V6k-5, V6k-4, V6k-3, V6k-2 

, V6k-i, V6k) (^u^it. j^y^^~mmw(omi<D^mr^m2<D^mco^xzj^m3(D 

[0 2 0 1 1 
[1:3 2] 



J = GrjET* mod P j&n-d 



rGlD,p-l] 



[0 2 0 2] 
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[0 2 0 3 1 

cisXZf {si, S2, S3, S4, S5) (DU^H. ^ > iEHJ* ( y , f) tm^m 
[0 2 0 4] 

ms 3] 

e'/i' = r"g-'h^e^ mo d p fe' = Z*^ mod f ff* = ff^ mod p 

[0 2 0 5] 
[0 2 0 6] 

cisirf (wi, • • • , wk, zi, • • zk) ^ 2 <^^|^T"- J -e^ 

[0 2 0 7] 
[ms 4] 

of =g^ mod p e' = r~"'-B^ mod v 

J ^CTB'' mod P t^-D 7^l^o 

[0 2 0 8] 

[ 0 2 0 9 ] 

Mi^ki^s m^lii1J^^2 1 0(4. ;^T- ■>y'°A 2 0 6 -C\ m-W'ltr-^ (g' , e' ) . 

^1 co^j^T'-iS' h' . m2<Dmmr-^ ] . ^amm^r-^ (c vi. va, V3, V4 

, V5, V6, • • • V6k-5, V6k-4, V6k-3, V6k-2, V6k-1, V6k, Si, S2, S3, 

S4, S5, wi, • • • Wk, zi, • • • Zk) "/^^ t LTtB:^j-t"^o 

[0 2 10] 
[0211] 

0 3 tmm-ti>^ tx-i'^j^zLfzji y/'i-wEmw (r , i3xx/m^ma ^iEL<m^i. 

[0 2 12] 
[0 2 13] 

[ms 5] 

c = ?^ ♦ ^ . lli^lK'iir^Kibl II . . . UWJlw ' . . ||4||m) 



[0 2 14] 
[0 2 15] 
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[^3 61 

Ti = ftVV 

Is = j?V= 

J' _ / G^^-fif^^ mod P c\j] = 0 

^ ~ \ J^iff'' mod P c[i] = 1 

(where e'j := e'^I'^e*'^ mod p) 
[0 2 16] 

[0 2 17] 
[0218] 
[0 2 19] 
[0 2 2 0] 

ms 7] 



[0 2 2 1 ] 

[0 2 2 2] 
[^3 8] 



[0 2 2 3] 

[0 2 2 4] 
[ifc3 9] 



[0 2 2 5] 
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[0 2 2 6] 
[0 2 2 7] 

m4 01 

s := cEinodg 

[0 2 2 8] 

^it^-t^, ^(7) (c, s) ^mmr-^ t^j:^o ^(DWEmT-^j,zx^wEm-^\ ^y^^ 

[0 2 2 9] 
[^4 1] 



[0 2 3 0] 
[0 2 3 1 ] 

^-k\'.:^y^-^-\%m^7^^^\Q2\Z^7^^ftfz^Z^^^~'}7.V j<Iu, s p ku, r 
, Su>| Ocl3>6^^. ^I-^$tLfc^ >^t-|iEI3g#69^ 1 
[0 2 3 2] 
[^4 2] 



[0 2 3 3] 

^1 |W1— co^ >yt-fiEgg#(D^ 1(7)M* r ^-g-tf ^ V ^ > (lu, s p ku, r, 

[0 2 3 4] 

[0 2 3 5] 

L/C J: ^ tr. ^^Jfem^l:: i Bf ^>fb7*- iJ'^W^^ 2 0 5 . ^1 <7)^m 

T-'-^'f^jt¥^2 0 6. i3J:tf^2 0^m7^~-:^{'^J^^^2 0 

[0 2 3 6] 
[0 2 3 7] 

^^^^2. ^|E^«3. ^ 1 ~ 3 CO^ ^/-^-'if-T'l^M^ee ~ 8. ^1~3(D^>/N'- 
[0 2 3 8] 
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~8{±. litg^^tfcLT. ^^)V~-f^y^^~-(D^m^m-^'fTno ^ 1 ~3 ^/t-'ify 
[0 2 3 9] 

[0 2 4 0] 

^ 1 ~ 3 CO^ >^^---9--7^'l=S^g 6-8 O^-^ {±. 601,7 

0 1, 8 0 1, ^wc^mm^mmmu 602, 702, 802, 

603, 703, 803, is XXf^m^}^^6 0 4, 7 0 4, 8 0 A^^LX^^^o 
[0 2 4 1 ] 

f|56 0 2 Kiatj-t^o 

[0 2 4 2 ] 

^m^mmm-mmmmM 6 o 2 ^nmmmm^^^me 0 1 x^^Ltz^tmrn 

[0 2 4 3 ] 
[0 2 4 4] 

SLifc^Ma 0 4 {i, ^Mt^ifcii^^^^ 6 0 1 i^xx^^n^ y^'^-^m^me 0 

[0 2 4 5] 

^1, ^2. ^3 (7)p« >/^--^tydiia^^S9. 10.1 1<7)#^5±. ^msim^mM^ 
901, 1001, 1101, 'j^wc^mm^-mm^wM 902, 1002, 110 

2^ ^W^J^y^-^~jlkm^^9 0 3 , 1 0 0 3, 1 1 0 3, gLm£fe^^9 0 4, 1 0 0 4, 

1 1 0 4^^LTV>;S,o J^lTM#<^/ii6, p<>^'?--9-7'aa»^g9 irov^-cm§§-r^o 
[0 2 4 6] 

0 2 trm;t]-r^o 

[0 2 4 7] 

^s^ffcitM^-if fiii5'itfp 9 0 2 ^nmmmm^mmm9 o i x^j^Ltz^mmm 

[0 2 4 8] 

^Wc^ >7^~-iiii^#^9 0 3 ii. m<D^ y^-^-^^m.mmutmm^n^-^^d:i)^h. ^km 
^g 3 <DW^^ 3 0 1 x^m^fifz t . ^Mi^u^-if mifi'itse 9 o 2 
mm $ :}x;^c^tfciiii^^ti^>M t . ^ ^-/^^-'itmii^^^ 1 0 2 t^pi^ $ :fx/c ^ >'7^*-'It^ t 

[0 2 4 9] 
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[0 2 5 0] 

[0 2 5 1 ] 

1 0 3 ^^^<2rPfltf *R 
[0 2 5 2 ] 
IWi 3 ] 

[0 2 5 3 ] 
[0 2 5 4] 

^tc. ^2. mso^y^-^-^ymmmme. 7. s <D^nmmmm^)^^^ 
6 0 1 . 7 0 1 . 8 0 1 (D^^i)^^ ^ y^-^-^mii^^^^&^m^t^wcm^'^M^i'fj^i^. 
^mMmm^^n^mnmmmmM 6 02. 702. 802 Kmrn-r^ho ^nmmmii 

[ 0 2 5 5 ] 

— -^Ji: LT. Pedersen<^"A Threshold Cry 
ptosystem without a Trusted Party" (Advan 
ces in Cryptology-EUROCRYPT '91, pp. 522-52 

[0 2 5 6] 

^1. ^2. m3<D^ >'/^~-^y^mMmW:6 . 7. Sco^^Ji. S-f\ Zq±co2^<7) 
>'iS^^At::S^o i^-e. ^ 1 >^-^-^j-•7^1=S^» 6 {±#:K^ f i (z) ^ 

tM*^ o 

[0 2 5 7] 
[^4 4] 

fi{z) = oiD + aiiz + aizz' mod q 
[0 2 5 8] 

^2. ^3 «0p« :^/^^--ij-yifS^fi7. 8^>. ^ihtmmzi2 (z) . fs (z) 

[0 2 5 9 ] 

1^ 1 co^ y/^-^y^mmmW 6 ti. 
[0 2 6 0] • 
m4 5] 

Jill = modp Si2 = modp iTia = ft'" modp 
[0261]' 

[0 2 6 2 ] 

|Wl#tr, ^2 0^ >/-^^--9--7~^l=S^*7(±H2i, B.22, B.zs'k^l ^XZ/m 3 CO y^y^"^ 

-■^y'^mmwe . sKm^. m3<D:^y^^~^y''mRmw:sii}i3i, H32, ylss^^i 

[0 2 6 3] 
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Cl^i-eaio, 320, aao t> 1, vz, y 3 i: ^iBi" -5. i > yi, vz, v^ifi^fL 

[0 2 6 4 ] 
[15:4 6 1 

1/1 = iTiD = /i*'^ mod p = iSasD = 'i** mod P 3/3 = JSao = mod P 

[ 0 2 6 5 ] 

[0 2 6 6] 

-f-LT. ^ 1 ^-^--^fn^a^g 6 ti 

[0 2 6 7] 
[^4 7] 

iJu = /i(2) mod q 

[ 0, 2 6 8 ] 

[0 2 6 9] 
[i5:4 8] 

iiia = /i(3) mod ff 

[0 2 7 0] 

[0 2 7 1 ] 

IWl^ttC. ^2 CD^ >'/-?--i^-7^'l=a^g7ti 
[0 2 7 2] 
[1:4 9] 

i32i = /afl) mod g 

[0 2 7 3 ] 

[0 2 7 4] 
[^5 0] 

tjsa = /2(3) mod g 
[0 2 7 5] 

^*7 {i 

[0 2 7 6 ] 
[^5 1] 

i53i = /a^l) mod g 
[0 2 7 7] 

[0 2 7 8] 
[ifc5 2] 

vaz = /a (2) mod g 

[0 2 7 9] 

=£r^2 >^t--if-^'lfa^«7 tc. MtC, ^M-T'&o 
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[0 2 8 0] 

21, H32, H23i3j:Z/ 
[0 2 8 1 ] 
[m 5 3 ] 

[0 2 8 2] 

»3<7?p<>/^---ify^S^S8;0^e.H3i, H32, HsaiSitJ*' 
[0 2 8 3] 
[^5 4] 

€31 

[0 2 8 4] 

[0 2 8 5] 

[0 2 8 6] 
[^5 5] 

[0 2 8 7] 
[^5 6] 

iial 

[0 2 8 8 ] 
[^5 7] 

[ 0 2 8 9] 

^l$:Lf^J#'^tc{i. ^2 <7)^ >/N'--9-:/«S^«7 fi. ^^lE^^M/t-T 
[0 2 9 0] 
[^5 8] 

[0 2 9 1 ] 
[^5 9] 

4321 

miE# 2004-3077569 



#11 2004-016006 



^->^' : 26/ 



10 2 9 2 ] 

[0 2 9 3] 
[^6 0] 

y = yi '3/2 -ya modp 

tLxtmt^o '^^^). ^^y^^-^ymm'^me. 7. sit. ^^o^n^mmmm 
mmi^^m t-r^ mm<D7Q^ i^^^tz^ (omm^^m. $ tt/cit o ^ g * tew ^) 

[0 2 9 4] 

^ LT. <2:mm y ^ ^^)P-y'mMmW 1 0<2rPftItfRPS^¥-^ 1 0 1 * 1 . 
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;S^^9 0 1 . 1 0 0 1 . 1 1 0 1 tt. ^ >/^"-daii^tcffiv>^^rji$li:^M^^M^f^j^ 

i-;&o ^LT. ^w^ii^^ >^^--itM>^MJ: LT. ^t^iinr^s^^-if f^a-itfi^ 9 o 2 
. 1002. 1102 Kn&m-r^o tfz^ ^mm^^ y^'^-^m^^mmt l-c^^;u--7°i= 
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